Trust Centre

The Udal Trust Centre explains deployment boundaries, security assurance and software supply-chain controls for procurement and risk teams.

Certifications and frameworks

Cyber Essentials Plus certified. G-Cloud 14 & 15 listed. ISO/IEC 27001 certification planned early 2027. UK GDPR obligations remain the responsibility of your organisation; deployment and governance controls support your assessment, rather than replacing it.

Architecture and data flow

Udal runs inside the customer’s boundary and never receives customer data. Your policies determine which models and tools agents may use, including whether external model providers are permitted.

Every step crosses a check, and every check leaves a record. Nothing outside the boundary is reached unless you allow it. The same shape applies on Azure, Google Cloud or your own servers; this diagram shows the AWS reference deployment.

This diagram shows an AWS reference deployment, not a requirement to use AWS. Udal also supports your cloud account, on-premises infrastructure and air-gapped environments.

Read the deployment architecture

Software supply chain

Every release is signed and ships with a software bill of materials (SBOM). Use these artefacts as part of your software supply-chain review and release approval process.

Built on familiar foundations

Udal uses Kubernetes, OPA, Temporal and Prometheus. Your teams can assess the control plane using familiar infrastructure, policy, workflow and monitoring foundations.

Public sector purchasing

Udal is listed on G-Cloud 14 & 15. Standard UK public-sector purchasing routes are supported, with assurance documentation available for procurement and security review.

Request the security pack

Start a 30-day pilot Book a briefing